Privacy Policy

1. Introduction

Upscano ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at upscano.com and use our services, including uptime monitoring, security scanning, and site reliability tools (collectively, the "Services"). Please read this policy carefully. By accessing or using our Services, you agree to the terms of this Privacy Policy.

2. Information We Collect

2.1 Personal Information

We may collect personally identifiable information that you voluntarily provide when you register for an account, subscribe to a plan, or contact us. This includes:

• Full name
• Email address
• Company or organization name
• Billing information and payment details
• Phone number (optional)

2.2 Usage Data

We automatically collect certain information when you access our Services, including:

• IP address and approximate geographic location
• Browser type and version
• Operating system
• Pages visited, time spent, and navigation paths
• Referring and exit URLs
• Device identifiers

2.3 Monitoring Data

When you configure monitoring targets through our Services, we collect and process data related to the websites and endpoints you monitor, including response times, HTTP status codes, SSL certificate details, and security scan results. This data pertains to your monitored targets and is not personal information of third parties.

2.4 Cookies and Similar Technologies

Our marketing website at upscano.com does not set any cookies and does not use analytics, advertising, or tracking technologies. No consent banner is required to browse the marketing site.

Our application at app.upscano.com uses a small number of strictly necessary cookies to operate the Services you have requested. These include:

• Authentication cookies: used to keep you securely signed in to your account and to maintain your session.
• Security cookies: used to prevent cross-site request forgery (CSRF) and detect abuse.
• Preference cookies: used to remember basic settings such as your selected theme.

Strictly necessary cookies are exempt from prior consent requirements under GDPR and the ePrivacy Directive because they are essential to deliver the service you have explicitly requested. You can block or delete cookies through your browser settings, but doing so will prevent you from signing in or using core features of the application. We will request your explicit consent before setting any non-essential cookies (such as analytics or marketing cookies) if we introduce them in the future.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, operate, and maintain our Services
• To process transactions and manage your subscription
• To send alerts, notifications, and monitoring reports
• To communicate with you about updates, security notices, and support
• To improve and personalize your experience
• To analyze usage trends and optimize performance
• To detect, prevent, and address fraud or security issues
• To comply with legal obligations

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: We engage trusted third-party vendors to assist with hosting, payment processing, analytics, and customer support. These providers are contractually bound to protect your data.
• Legal Requirements: We may disclose information if required by law, regulation, legal process, or governmental request.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.
• With Your Consent: We may share information for any other purpose with your explicit consent.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Services. Monitoring logs are retained according to your plan tier (7 days for Free, 90 days for Teams, custom periods for Pro and Enterprise). Upon account deletion, we will remove your personal data within 30 days, except where retention is required by law.

6. Data Security

We implement industry-standard technical and organizational measures to protect your data, including encryption in transit (TLS 1.2+) and at rest, access controls, regular security audits, and secure infrastructure. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Portability: Request your data in a structured, machine-readable format.
• Objection: Object to processing of your data for certain purposes.
• Withdraw Consent: Where processing is based on consent, withdraw it at any time.

To exercise any of these rights, please contact us at privacy@upscano.com.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or equivalent mechanisms, to protect your data in compliance with applicable data protection laws.

9. Children's Privacy

Our Services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected data from a child, we will take steps to delete it promptly.

10. Third-Party Links

Our Services may contain links to third-party websites or services. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party services you access.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Services after any changes constitutes acceptance of the revised policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: